Filtering Rules User Interface for Fraud Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authorization systems lack an intuitive and flexible way for administrators to customize filtering rules to address varying types of fraudulent activities encountered by different clients, leading to ineffective protection against fraudulent requests.
Innovation Solution
A user interface is provided for administrators to customize filtering rules at an authorization server, allowing them to create and modify rules based on specific fraudulent activities, enabling selective forwarding or rejection of authorization requests based on attributes such as user identifiers and transaction protocols.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If filtering rules are established at a node to reject authorization requests, then fraudulent requests are blocked, but the system lacks flexibility to customize rules for different clients encountering different types of fraud
Solution Approach 1:
The patent segments the authorization system into multiple independent nodes, each capable of maintaining its own set of filtering rules. This allows different clients to have customized rules tailored to their specific fraud patterns, resolving the contradiction between centralized fraud protection and decentralized customization needs.
Solution Approach 2:
The system implements dynamic rule configuration where filtering rules can be added, modified, or removed at individual nodes based on emerging fraud patterns. This dynamic adaptability allows the system to maintain high reliability through consistent fraud blocking while providing the versatility needed to respond to different types of fraudulent activities across different clients.
2Adaptability or versatility
If a user interface is provided for administrators to customize filtering rules, then rule flexibility and granularity are improved, but system complexity increases
Solution Approach 1:
The patent implements a self-service user interface that allows administrators to independently configure and customize filtering rules for their specific needs without requiring complex system administration. The interface provides intuitive controls for adding, modifying, and managing rules, reducing the perceived complexity while maintaining high adaptability.
Solution Approach 2:
The system introduces an intermediary management layer that handles the complexity of rule configuration and validation. This intermediary interface mediates between the administrator's simple customization actions and the underlying complex rule evaluation logic, allowing granular rule customization without exposing the full system complexity to users.
3Reliability
If filtering rules are applied at multiple nodes, then fraud detection coverage is improved, but processing time and system overhead increase
Solution Approach 1:
The patent implements preliminary filtering at each node where authorization requests are first received. High-confidence fraud patterns are blocked immediately at the point of entry, preventing these requests from traversing the entire authorization chain. This preliminary action maintains comprehensive fraud detection coverage while minimizing processing time for obviously fraudulent requests.
Solution Approach 2:
Each node in the authorization system is configured with locally optimized filtering rules tailored to the specific fraud patterns encountered at that location. This local quality approach ensures that each node performs only the fraud detection relevant to its context, improving overall detection coverage without uniformly increasing processing time across all nodes.
Data Source
AI summary
Embodiments of the invention are directed to techniques for preventing access to protected resources by unauthorized individuals by enabling an administrator associated with a transport computer to customize filtering rules via a user interface. In some embodiments, a server computer can, from a client computer, receive credentials of the administrator. The credentials can be used to retrieve requesting computers registered with the transport computer. The requesting computers may then be displayed at the client computer. A selection of one of the requesting computers is received from the client computer. A plurality of settings, which represent rules controlling which authorization request messages from the selected requesting computer are forwarded, are displayed at the client computer, wherein one of the settings references one or more attributes that distinguish certain authorization request messages. In response to receiving a selection of the respective setting, modifying the rules in accordance with the plurality of settings.